|
|
Nebdar

  
    
Promising
Supreme Hero
Generation N
|
posted October 20, 2008 04:22 PM |
|
Edited by Nebdar at 16:24, 20 Oct 2008.
|
Quote: Most hacking attacks start with something small like this redirection.
ModdersWorkshop => The Modding Wiki the link doesn't work
Message:
Parse error: syntax error, unexpected '<' in /home/aoheroes/public_html/heroes5/modding_wiki/inc/html.php on line 1246
everybody that have had this problem scan your computer
____________
|
|
TheDeath

   
      
Responsible
Undefeatable Hero
with serious business
|
posted October 20, 2008 04:28 PM |
|
|
ModdersWorkshop => The Modding Wiki the link doesn't work
Quote: Message:
Parse error: syntax error, unexpected '<' in /home/aoheroes/public_html/heroes5/modding_wiki/inc/html.php on line 1246
OMG no really that's a very bad sign. If it says "syntax error" it means if you figure out and guess the code, you can modify it easily. If not it has been ALREADY modified 
It's an open hole for crackers
|
|
Keksimaton

  
    
Promising
Supreme Hero
Talk to the hand
|
posted October 20, 2008 04:33 PM |
|
|
Something made "Adobe Reader" open up and say that: "The file is not PDF" or something . Then my firewall gives me a message that something was blocked from invading/tresspassing (what ever it is in english).
Nasty.
____________
Noone shall pass, but no one besides him shall pass.
|
|
OmegaDestroyer


Hero of Order
Fox or Chicken?
|
posted October 20, 2008 04:35 PM |
|
|
I'm getting the same thing on internet explorer.
____________
The giant has awakened
You drink my blood and drown
Wrath and raving I will not stop
You'll never take me down
|
|
mvassilev

   
      
Responsible
Undefeatable Hero
|
posted October 20, 2008 04:41 PM |
|
|
Happened to me as well. Opens Acrobat Reader. Did anyone get a virus from this? I hope I didn't. Should Norton Firewall block it? It blocked a cookie from Prevedvsem earlier.
And I installed NoScript and it doesn't open Acrobat Reader any more, so should I be all right?
____________
Eccentric Opinion
|
|
TheDeath

   
      
Responsible
Undefeatable Hero
with serious business
|
posted October 20, 2008 04:42 PM |
|
|
Quote: And I installed NoScript and it doesn't open Acrobat Reader any more, so should I be all right?
Not really, if it opened once and it wasn't blocked it means your system is infected already...
|
|
radar

   
     
Responsible
Legendary Hero
Castle/Haven player
|
posted October 20, 2008 04:45 PM |
|
Edited by radar at 16:48, 20 Oct 2008.
|
For me Windows Defender had asked for a restart and that's it. The full scan haven't found anything dangerous anymore, neither did antivirus.
NoScript protects you from infecting again after you have removed the threat already.
____________
|
|
OmegaDestroyer


Hero of Order
Fox or Chicken?
|
posted October 20, 2008 04:46 PM |
|
|
I'm running McAfee and so far everything is normal. I have gotten something to ask me to fill out a review but I'm not sure if it's related.
____________
The giant has awakened
You drink my blood and drown
Wrath and raving I will not stop
You'll never take me down
|
|
mvassilev

   
      
Responsible
Undefeatable Hero
|
posted October 20, 2008 04:47 PM |
|
|
But I had Norton Firewall activated. And it blocked a cookie. Does that still mean that I'm infected?
____________
Eccentric Opinion
|
|
Darkshadow

 
     
Legendary Hero
Cerise Princess
|
posted October 20, 2008 04:47 PM |
|
|
Bah, ill risk it and see what the hell is this document
____________
|
|
Asheera

    
      
Honorable
Undefeatable Hero
Elite Assassin
|
posted October 20, 2008 04:48 PM |
|
|
I didn't get any Acrobat Reader opened. I think NoScript blocks this thing - you all should install it ASAP
____________
|
|
mvassilev

   
      
Responsible
Undefeatable Hero
|
posted October 20, 2008 04:50 PM |
|
|
If I'm infected, it hasn't done anything yet. But I'm running Kaspersky just in case.
____________
Eccentric Opinion
|
|
radar

   
     
Responsible
Legendary Hero
Castle/Haven player
|
posted October 20, 2008 04:54 PM |
|
|
I know from personal experience, running two antivirus programs at the same time isn't the best choice.
____________
|
|
mvassilev

   
      
Responsible
Undefeatable Hero
|
posted October 20, 2008 04:56 PM |
|
|
I'm not running two anti-virus programs. Just Kaspersky. I'm running Norton Firewall, not Norton Anti-Virus.
____________
Eccentric Opinion
|
|
emilsn

 
     
Legendary Hero
|
posted October 20, 2008 04:58 PM |
|
|
Same problem - What's the solution
____________
Don't walk behind me; I may not
lead. Don't walk in front of me;
I may not follow. Just walk
beside me and be my friend.
|
|
radar

   
     
Responsible
Legendary Hero
Castle/Haven player
|
posted October 20, 2008 05:06 PM |
|
Edited by radar at 17:09, 20 Oct 2008.
|
1. Install NoScript
2. block heroescommunity.com (and eventually heroesofmightandmagic.com)
3. Scan your comp for viruses
edit:
aww, I wish I had had standard firefox, not beta. The beta doesn't support the extension which would have normally asked me if I want to open or save the pdf.
____________
|
|
TheDeath

   
      
Responsible
Undefeatable Hero
with serious business
|
posted October 20, 2008 05:07 PM |
|
|
Quote: Bah, ill risk it and see what the hell is this document 
If you are serious with this then I'll have to tell you you're a fool for that. This document probably isn't even meaningful, it will display as a "invalid file format" because it isn't supposed to be a document, it's supposed to exploit some flaws in the format or Acrobat Reader flaws. This is most likely of course I could be wrong and a kiddo cracker be there and making a stupid document with "HAAAA U R PWNED!!!" but I somehow doubt that.
Quote: Same problem - What's the solution
Block scripts (JavaScript), I use NoScript as well in Firefox.
|
|
Doomforge

     
      
Admirable
Undefeatable Hero
Retired Hero
|
posted October 20, 2008 05:10 PM |
|
|
noscript fortunately owns all such stupid things although I noticed that page too.. weird..
____________
We reached to the stars and everything is now ours
|
|
radar

   
     
Responsible
Legendary Hero
Castle/Haven player
|
posted October 20, 2008 05:20 PM |
|
Edited by radar at 17:22, 20 Oct 2008.
|
Guys, it is "Win32 Haxdoor"
I have turned on UAC so I'm immune to backdoors now, I guess...
____________
|
|
Shadowcaster

    
    
Honorable
Supreme Hero
Shaded Scribe
|
posted October 20, 2008 06:48 PM |
|
|
For those running anti-spyware programs, go to their site and make sure they search for something called rootkits. Apparently, this virus embeds drivers in your system that will reset registry values and restore the files that might be deleted by security programs if they are not removed. Of course, there's nothing to worry about if you didn't open the document, but this thing sure is a nasty little booger.
____________
>_>
|
|
|